A data center wants to track the location and status of thousands of servers. They need a method that allows quick identification and can be updated automatically. Which technique is most suitable?

Use a manual logbook with server names and locations.

Use barcode labels on each server and scan them during maintenance.

Use the server's hostname as the only identifier.

Use RFID tags that can be read automatically by sensors in the racks.

A company wants to detect rogue devices connected to their network. They have a CMDB but it is not always accurate. Which technique should they use to identify unauthorized devices?

Run continuous network discovery and compare results against the CMDB.

Disable all unused network ports.

Ask employees to report any unknown devices they see.

Review firewall logs for blocked traffic.

A company is acquiring new laptops for employees. What should be done during the acquisition phase to support later asset management?

Wait until the laptop is deployed to record it in the inventory.

Only record the purchase price for financial purposes.

Record the asset details, assign an owner, and tag the laptop with a unique identifier.

Assign the asset to the IT department for management.

A financial services firm is building an asset inventory. They need to prioritize security controls based on the impact of a loss. Which classification approach should they use?

Classify assets by purchase date, with newer assets receiving higher protection.

Classify assets by criticality, sensitivity, and business value, then assign protection levels accordingly.

Classify assets alphabetically by name to simplify the inventory.

Classify assets by the department that owns them, giving all assets in a department the same protection.

Dell NIST Cybersecurity Framework v2.0

Domain 3Objective 4

List the Tools and Techniques Used in Asset Management. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 3)

Part of the NIST Framework: IDENTITY Function domain, which accounts for 18% of the NIST-CYBERSECURITY-FRAMEWORK-2 exam.

32questions here

7free pages

7concepts

18%of the exam

Questions 11–15

11application · medium
A data center wants to track the location and status of thousands of servers. They need a method that allows quick identification and can be updated automatically. Which technique is most suitable?
Select an answer first
12foundation · easy
Which phase of the asset lifecycle involves securely wiping data and disposing of hardware when an asset is no longer needed?
Select an answer first
13application · medium
A company wants to detect rogue devices connected to their network. They have a CMDB but it is not always accurate. Which technique should they use to identify unauthorized devices?
Select an answer first
14application · medium
A company is acquiring new laptops for employees. What should be done during the acquisition phase to support later asset management?
Select an answer first
15application · medium
A financial services firm is building an asset inventory. They need to prioritize security controls based on the impact of a loss. Which classification approach should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NIST-CYBERSECURITY-FRAMEWORK-2

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Dell Technologies. “NIST-CYBERSECURITY-FRAMEWORK-2” is a trademark of its owner, used for identification only.